apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: nfd-healthz
  namespace: nfd
spec:
  port: 8082
  podSelector:
    matchExpressions:
    - {key: app, operator: In, values: ["nfd-master", "nfd-worker"]}
    matchLabels:
      platform.edge.ncr.com/component: node-feature-discovery
  proxyProtocol: gRPC
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: nfd-healthz-auth
  namespace: nfd
spec:
  client:
    unauthenticated: true
  server:
    name: nfd-healthz
---
apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: nfd-metrics
  namespace: nfd
spec:
  port: metrics
  podSelector:
    matchLabels:
      platform.edge.ncr.com/component: node-feature-discovery
  proxyProtocol: HTTP/1
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: nfd-metrics-auth
  namespace: nfd
spec:
  client:
    meshTLS:
      serviceAccounts:
      - name: prometheus
        namespace: prometheus
  server:
    name: nfd-metrics